Mobile Engineer

Openkyber; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Openkyber in the United States seeks a Mobile Engineer to join on a long-term contract in Springfield, Boston, or NY (Hybrid). The role focuses on designing, validating, and operationalizing automated mobile vulnerability scanning and configuration compliance across enterprise devices (iOS/iPadOS and Android).

You will lead PoT activities, evaluate tools, integrate with MDM, SIEM/SOAR, ITSM, and CMDB, and drive full-scale implementation while aligning with regulatory requirements such as NYDFS.

Qualifications

• Must have mobile vulnerability management and compliance experience.
• Experience with OS patching, encryption, jailbreak/root detection.
• Hands-on with SIEM/SOAR, ITSM integrations.
• Strong documentation and stakeholder management.
• Ability to design PoT plans and run pilots.

Responsibilities

• Define PoT scope, success criteria, and test plans for mobile scanning.
• Evaluate tools for coverage, accuracy, scalability, and privacy controls.
• Execute pilots across device populations validating detection and compliance.
• Coordinate with InfoSec, Compliance to ensure regulatory alignment.
• Build automation scripts and APIs to enrich findings.
• Provide guidance and training to operations teams.

Skills

Mobile OS security

Vulnerability management

Configuration compliance

Mobility scanning tools

MDM integration

SIEM/SOAR integration

Automation scripting

REST APIs / JSON

Stakeholder communication

Documentation

Education

Bachelor's degree in Cybersecurity, Information Systems, CS, or Engineering

Tools

Qualys VMDR

Lookout

Workspace ONE

Intune

Jamf Pro

Splunk

QRadar

XSOAR

ServiceNow

Job description

Job Title: Mobile Engineer Work Location: Springfield or Boston or NY (Hybrid)

Long Term Contract

Job Description Role:

The Mobile Device Vulnerability Management & Configuration Compliance Engineer will partner with internal stakeholders to design, validate, and operationalize an automated mobile device vulnerability scanning and configuration compliance capability across enterprise-issued mobile endpoints (iOS/iPadOS and Android). This role leads proof-of-technology (PoT) activities including tool evaluation, architecture validation, security controls mapping, and pilot execution, and drives full-scale implementation through integration with other security tools such as MDM, SIEM/SOAR, ITSM, and asset inventory/CMDB systems.

The engineer will establish and maintain mobile vulnerability management processes aligned to corporate and regulatory requirements, develop continuous compliance and policy enforcement strategies, implement risk-based remediation workflows, and deliver measurable improvements in mobile endpoint security posture.

Key Responsibilities

• Define PoT scope, success criteria, and test plans for automated mobile vulnerability scanning (e.g., agent-based/agentless, MDM-integrated, API-driven).
• Evaluate candidate tools for: coverage (OS/app/cert/profile), detection accuracy, scalability, device impact, privacy controls, and reporting fidelity.
• Execute pilots across representative device populations validating: vulnerability detection capabilities (OS versions, CVEs, patch levels, risky apps) configuration compliance checks (encryption, jailbreak/root, screen lock, OS hardening) integration readiness (Intune/Workspace ONE/Jamf; SIEM; ITSM; CMDB)
• Produce PoT outcomes: findings, risk analysis, cost/benefit, architecture decision record, and go/no-go recommendation.
• Coordinate with InfoSec and Compliance teams to ensure SaaS platform posture aligns with regulatory requirements (NYDFS).
• Build and run mobile vulnerability lifecycle processes: discovery, assessment, prioritization, remediation, validation, reporting.
• Establish severity/risk scoring tuned for mobile (exposure, device role, app risk, compliance impact).
• Coordinate remediation with endpoint engineering, mobility admins, app owners, and operations teams.
• Validate remediation effectiveness using scanner re-runs, policy compliance, and audit evidence.
• Develop, deploy, and continuously improve baseline security configurations for iOS/iPadOS and Android.
• Translate requirements into enforceable policies (password/biometrics, encryption, OS update controls, app controls, certificate/profile constraints, VPN/Wi-Fi security, logging settings).
• Implement compliance monitoring and drift detection; drive automated or semi-automated corrective actions.
• Build automation scripts and APIs to normalize and enrich findings.
• Support change management and communications for new controls impacting device behavior and user experience.
• Provide technical guidance and training to operations teams for ongoing support.

Required Skills

Mobile OS security fundamentals: iOS/iPadOS and Android security models, patching, permissions, app ecosystems, jailbreak/root detection concepts. Vulnerability management expertise: CVE/patch lifecycle, risk-based prioritization, SLAs, validation, metrics. Configuration compliance: baseline hardening, policy enforcement, continuous compliance monitoring, and drift remediation. Mobility Scanning Tool Experience (hands-on): Qualys Mobile VMDR, Lookout, Workspace One + Microsoft Threat Defense, or equivalent. MDM experience (hands-on): Microsoft Intune, Omnissa Workspace ONE, Jamf Pro, or equivalent. Enterprise integration skills: API integration, data normalization, and automation with SIEM/SOAR/ITSM (e.g., Splunk, Sentinel, QRadar; XSOAR, Sentinel SOAR; ServiceNow). Identity & access: conditional access concepts, device compliance states, SSO, certificates, MFA, posture-based access controls. Scripting/automation: PowerShell and/or Python; familiarity with REST APIs, JSON, OAuth, and secrets management. Security documentation: ability to author PoT plans, architecture diagrams, operational runbooks, and audit evidence. Excellent documentation and stakeholder management skills. Strong analytical and problem-solving skills. Excellent communication and stakeholder management skills; experience presenting PoT results and recommendations. Ability to work independently and across multifunctional teams. Detail-oriented with a focus on process improvement and operational excellence. Ability to manage multiple workstreams (pilot + integration + operations) with minimal supervision. Familiarity with NIST, CIS Benchmarks, DISA STIG (mobile), ISO 27001 control mapping, or similar frameworks.

Educational Requirements

Bachelor s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent practical experience.

Relevant Certifications

CompTIA Security+, CySA+ GIAC: GSEC, GMON, or related (if available/appropriate) Qualys/Rapid7/Tenable (or equivalent vulnerability platform certifications where relevant) Governance / Risk / Architecture (bonus) CISSP, CISM, CCSP ITIL Foundation (for ITSM integration and operations maturity)

Experience Level

5 8+ years in cybersecurity/endpoint security, with 2 4+ years specifically in mobile/UEM security, vulnerability management, or compliance engineering.